Alerts This Week
Warning Icon 1 537
Alerts This Week
Warning Icon 1 537

openSUSE Leap 15.3: Security Update for Java Fixing Memory Issues

opensuse
Calendar Grey January 18, 2022
Dist Opensuse Esm H88
This patch addresses a variety of problems in jdk-1_8_0-oracle for Ubuntu, delivering essential improvements for CPU efficiency and security protocols.
An update that solves 12 vulnerabilities and has two fixes is now available

Description

This update for java-1_8_0-ibm fixes the following issues:

- Update to Java 8.0 Service Refresh 7 Fix Pack 0

- CVE-2021-41035: before version 0.29.0, the openj9 JVM does not throw

IllegalAccessError for MethodHandles that invoke inaccessible interface

methods. (bsc#1194198, bsc#1192052)

- CVE-2021-35586: Excessive memory allocation in BMPImageReader.

(bsc#1191914)

- CVE-2021-35564: Certificates with end dates too far in the future can

corrupt keystore. (bsc#1191913)

- CVE-2021-35559: Excessive memory allocation in RTFReader. (bsc#1191911)

- CVE-2021-35556: Excessive memory allocation in RTFParser. (bsc#1191910)

- CVE-2021-35565: Loop in HttpsServer triggered during TLS session close.

(bsc#1191909)

- CVE-2021-35588: Incomplete validation of inner class references in

ClassFileParser. (bsc#1191905)

- CVE-2021-2341: Fixed a flaw inside the FtpClient. (bsc#1188564)

- CVE-2021-2369: JAR file handling problem containing...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory update important memory management java issue openSUSE TLS fix

Patch

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods

like YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

- openSUSE Leap 15.3:

zypper in -t patch openSUSE-SLE-15.3-2022-108=1

Package List

- openSUSE Leap 15.3 (ppc64le s390x x86_64):

java-1_8_0-ibm-1.8.0_sr7.0-3.53.1

java-1_8_0-ibm-demo-1.8.0_sr7.0-3.53.1

java-1_8_0-ibm-devel-1.8.0_sr7.0-3.53.1

java-1_8_0-ibm-src-1.8.0_sr7.0-3.53.1

- openSUSE Leap 15.3 (x86_64):

java-1_8_0-ibm-32bit-1.8.0_sr7.0-3.53.1

java-1_8_0-ibm-alsa-1.8.0_sr7.0-3.53.1

java-1_8_0-ibm-devel-32bit-1.8.0_sr7.0-3.53.1

java-1_8_0-ibm-plugin-1.8.0_sr7.0-3.53.1

References

https://www.suse.com/security/cve/CVE-2021-2163.html

https://www.suse.com/security/cve/CVE-2021-2341.html

https://www.suse.com/security/cve/CVE-2021-2369.html

https://www.suse.com/security/cve/CVE-2021-35556.html

https://www.suse.com/security/cve/CVE-2021-35559.html

https://www.suse.com/security/cve/CVE-2021-35560.html

https://www.suse.com/security/cve/CVE-2021-35564.html

https://www.suse.com/security/cve/CVE-2021-35565.html

https://www.suse.com/security/cve/CVE-2021-35578.html

https://www.suse.com/security/cve/CVE-2021-35586.html

https://www.suse.com/security/cve/CVE-2021-35588.html

https://www.suse.com/security/cve/CVE-2021-41035.html

https://bugzilla.suse.com/1185055

https://bugzilla.suse.com/1188564

https://bugzilla.suse.com/1188565

https://bugzilla.suse.com/1191902

https://bugzilla.suse.com/1191904

https://bugzilla.suse.com/1191905

https://bugzilla.suse.com/1191909

https://bugzilla.suse.com/1191910

https://bugzilla.suse.com/1191911

https://bugzilla.suse.com/1191913

https://bugzilla.suse.com/1191914

http...

Read the Full Advisory

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: openSUSE-SU-2022:0108-1
Rating: important
Affected Products: openSUSE Leap 15.3 ble.

Topics%20covered

Topics Covered

security advisory update important memory management java issue openSUSE TLS fix

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here